
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: WVdPFv1tc4mU+kjwlUOhQYlIs1OsEhOGkO5wqkYJyJM=
Subject key identifier: CC:0A:F5:84:34:01:B4:23:5C:B1:1C:28:EE:DE:B4:CB:91:5D:B1:FA
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 0198816736A55099E7CE18A557C9494CACC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 22:01:21 +0000
Manifest this update: Wed 06 Aug 2025 22:01:21 +0000
Manifest next update: Thu 07 Aug 2025 22:01:21 +0000
Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: Ycia+/kv2n9JpkpJx1pFC6Xlp5XkgFDdWsWnHwIO4Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:36:a5:50:99:e7:ce:18:a5:57:c9:49:4c:ac:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Aug 6 22:01:21 2025 GMT
Not After : Aug 7 22:01:21 2025 GMT
Subject: CN=cc0af5843401b4235cb11c28eedeb4cb915db1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:94:29:61:f6:25:af:3a:5a:d2:83:db:1c:1b:
b2:ef:8b:e1:20:57:5b:5b:4a:4d:12:3e:7e:7e:e0:
17:6d:56:98:c4:00:1a:82:1e:b0:dc:42:36:5f:95:
b4:e2:d7:6a:cd:b2:83:2e:aa:d9:63:d3:7a:7a:e9:
96:d6:c1:06:2e:de:03:f2:3c:d7:e9:13:bc:ac:91:
96:07:d7:ad:7b:06:4d:43:76:fd:c1:1c:84:34:7d:
71:16:0a:8d:14:38:6d:a4:9f:c9:2e:72:7a:67:50:
6a:f2:13:b2:41:cf:d9:24:bd:24:c9:7e:36:cb:3c:
ad:8b:e7:fe:9c:eb:e7:8b:63:78:42:2a:e8:0a:fa:
70:ac:0d:1b:e9:a2:17:8a:fd:2a:f7:7f:d8:24:e6:
98:8c:eb:b2:6f:ae:c6:91:30:5b:9f:90:c2:62:af:
13:fb:66:8b:55:c8:67:b7:01:5e:cb:8a:ff:0f:ef:
12:c6:32:6d:c1:0d:e2:15:2c:ab:db:1b:49:24:31:
ac:fe:0c:65:7b:1e:80:b1:72:73:21:fa:f9:24:8a:
a8:f8:9b:af:4f:7e:0f:8b:74:b7:64:85:64:95:f9:
b6:21:81:ed:15:67:01:22:e9:c6:63:f3:d8:ad:2b:
fc:ed:ee:d3:d1:8c:9f:22:81:23:c9:cc:0a:fe:86:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0A:F5:84:34:01:B4:23:5C:B1:1C:28:EE:DE:B4:CB:91:5D:B1:FA
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:50:cf:56:84:1e:af:21:5f:12:d7:6c:78:2f:fb:2f:fc:f7:
51:5e:ac:6a:ea:35:aa:e1:4d:af:76:f5:52:e9:c7:0d:58:1d:
76:31:6f:f3:a8:8c:fc:60:66:d0:c1:4b:12:73:43:e3:94:f2:
6a:63:0a:19:70:6b:88:cd:98:a6:cb:d7:46:1c:b7:fd:3a:0b:
5f:4a:fa:9a:37:b3:36:63:b5:db:f7:5c:55:2f:a9:c6:f5:6a:
2f:39:5e:97:a7:00:af:5b:76:fc:02:81:a1:18:dd:e3:7d:a2:
4a:ef:c4:e7:32:15:e4:36:be:b0:84:de:4a:68:1f:7b:75:64:
e6:b7:11:76:56:0e:74:96:c5:44:9b:15:5b:24:c9:fb:eb:1e:
1e:0a:3c:3e:7c:2e:ba:d1:d0:d1:eb:5a:9c:ba:6d:e8:80:98:
38:6a:80:ff:d2:da:eb:1f:0b:92:d3:54:9a:45:96:ce:d9:9f:
53:5d:9e:7a:9d:b6:7b:91:0f:cc:5a:55:07:83:a5:b7:ca:bb:
2c:87:1e:98:9a:32:8e:cc:ee:6b:81:af:b4:6e:ec:36:ca:b6:
9e:29:9d:56:ff:e7:42:3f:ec:4d:67:1b:41:4f:38:75:ce:8f:
69:42:4b:15:b3:7f:0d:f1:1e:49:4b:c2:c0:b6:7d:1f:53:a5:
31:18:97:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZzalUJnnzhilV8lJTKzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWJmMzNiMGIzODA4ODhmZTFlM2I4MGVkYTQ4YjE3ODFi
Yjc3MDkwHhcNMjUwODA2MjIwMTIxWhcNMjUwODA3MjIwMTIxWjAzMTEwLwYDVQQD
EyhjYzBhZjU4NDM0MDFiNDIzNWNiMTFjMjhlZWRlYjRjYjkxNWRiMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45QpYfYlrzpa0oPbHBuy74vhIFdb
W0pNEj5+fuAXbVaYxAAagh6w3EI2X5W04tdqzbKDLqrZY9N6eumW1sEGLt4D8jzX
6RO8rJGWB9etewZNQ3b9wRyENH1xFgqNFDhtpJ/JLnJ6Z1Bq8hOyQc/ZJL0kyX42
yzyti+f+nOvni2N4QiroCvpwrA0b6aIXiv0q93/YJOaYjOuyb67GkTBbn5DCYq8T
+2aLVchntwFey4r/D+8SxjJtwQ3iFSyr2xtJJDGs/gxlex6AsXJzIfr5JIqo+Juv
T34Pi3S3ZIVklfm2IYHtFWcBIunGY/PYrSv87e7T0YyfIoEjycwK/oYcuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwK9YQ0AbQjXLEcKO7etMuRXbH6MB8GA1UdIwQY
MBaAFEyr8zsLOAiI/h47gO2kixeBu3cJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUt
NDFhZTVmNGE1MDU1LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUtNDFhZTVmNGE1MDU1
LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglDPVoQe
ryFfEtdseC/7L/z3UV6sauo1quFNr3b1UunHDVgddjFv86iM/GBm0MFLEnND45Ty
amMKGXBriM2YpsvXRhy3/ToLX0r6mjezNmO12/dcVS+pxvVqLzlel6cAr1t2/AKB
oRjd432iSu/E5zIV5Da+sITeSmgfe3Vk5rcRdlYOdJbFRJsVWyTJ++seHgo8Pnwu
utHQ0etanLpt6ICYOGqA/9La6x8LktNUmkWWztmfU12eep22e5EPzFpVB4Olt8q7
LIcemJoyjszua4GvtG7sNsq2nimdVv/nQj/sTWcbQU84dc6PaUJLFbN/DfEeSUvC
wLZ9H1OlMRiX+Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:54 2025 by rpki-client